1 matches found
league/commonmark: Denial of service via adjacent inline attribute blocks
Impact With the Attributes extension enabled, AttributesListener::findTargetAndDirection resolves each attribute node's target by walking outward through its siblings. For a run of N adjacent inline attribute blocks placed at the start of a block with nothing to their left, each node scans the...
5.5AI score
SaveExploits0References4Affected Software1
20